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The stabilization of a quantum computer by repeated error correction can be reduced almost 
entirely to repeated preparation of blocks of qubits in quantum codeword states. These are multi- 
particle entangled states with a high degree of symmetry. The required accuracy can be achieved 
by measuring parity checks, using imperfect apparatus, and rejecting states which fail them. This 
filtering process is considered for f-error-correcting codes with t > 1. It is shown how to exploit the 
structure of the codeword and the check matrix, so that the filter is reduced to a minimal form where 
each parity check need only be measured once, not > t times by the (noisy) verification apparatus. 
This both raises the noise threshold and also reduces the physical size of the computer. A method 
based on latin rectangles is proposed, which enables the most parallel version of a logic gate network 
to be found, for a class of networks including those used in verification. These insights allowed the 
noise threshold to be increased by an order of magnitude. 



The concept of quantum computing has given fun- 
damental insights into the laws of Nature and 
promises powerful new computing capability, be- 
yond the range of any other type of computer, if 
it can be realized in practice [J II • A central 
consideration in both these aspects is the intrinsic 
sensitivity of quantum processes to the inevitable 
imperfections in physical devices. There exist pro- 
tocols based on quantum error correction (QEC) 
0, H H Q which allow successful quantum com- 
puting in the presence of low-level noise through- 
out the computer at all times — this is called fault- 
tolerance. A set of ideas which allow QEC to be 
fault-tolerant were put forward by Shor H H 0] . 
There followed further insights which generalized 
or improved the speed and space-efficiency of the 
methods El El El El El 

The noise level which can be tolerated in QEC 
has been estimated by a naly sis of the networks 
of operations involved HEHIE1E3 In |is| the 
present author analysed QEC networks which in- 
cluded several further improvements in efficiency, 
and found that the tolerated noise could be consid- 
erably higher than was previously possible. This 
letter presents the basic insights which generated 
these efficiency improvements. 

This work is significant not only to the practical 
task of building a quantum computer, but also to 
two other areas. First, it contributes to our un- 
derstanding of the thermodynamics of controlled 
entangled systems. This subject has only been ex- 
plored a little up till now, but has revealed some 
striking behaviour; for example fault-tolerant (FT) 
methods lead to a phase transition in a set of qubits 
stablized by QEC, in which the order parameter is 
related to the size of clusters of qubits whose entan- 



glement is preserved at finite temperature .19, 20] . 
The present work extends the range of possible 
transition temperatures. Secondly, basic insights 
into quantum network constructions improve our 
understanding of quantum processing methods in 
general, extending their use both in quantum algo- 
rithms and in realizing physical effects which ex- 
ploit entanglement for other purposes. 

The main result of FT QEC is to achieve a logical 
error rate of 0(e t+1 ) per logical operation followed 
by recovery, where e is the imprecision or noise 
of the elementary operations on physical qubits or 
per time-step for resting qubits, when a t-error cor- 
recting quantum code is employed. In order to do 
this, a combination of well-chosen code structure, 
network construction, and repetition is employed. 
In this letter I exploit the first two ingredients so as 
to avoid the third. I also show how to arrange the 
relevant networks using a method based on latin 
rectangles so that they are as parallel as possible 
and hence require a minimal number of time-steps. 

This study assumes the most efficient way to 
achieve FT QEC known to the author, as follows. 
Ancillary qubits are prepared in quantum code- 
word states (e.g. the encoded logical zero state 
|0) L ), then they are coupled them to the 'data' 
qubits which store the (encoded) logical informa- 
tion, then the ancilla are measured and the clas- 
sical information obtained is decoded by classical 
processing in order to deduce the corrective oper- 
ation to be applied to the data EH- This method 
works for all CSS codes; these are important be- 
cause they include good codes and allow relatively 
simple, and therefore robust, FT gate construc- 
tions [I El El Ei The method relies on the 
following concepts. First, the properties of the en- 
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coding lead to the correct movement of error in- 
formation from the data qubits to the measure- 
ment apparatus applied to the ancilla, without ex- 
tracting any of the quantum information stored in 
the data. Secondly, the ancilla needs only to be 
checked for one type of error (either a x = X or 
a z = Z; I assume X here), because only one type 
propagates from ancilla to data when the two are 
coupled (when the desired propagation of Z er- 
rors from data to ancilla takes place, then X errors 
propagate in the other direction, and vice versa). 
The ancilla errors which are not detectable by this 
verification remain in the ancilla and render the 
deduced information concerning data errors (i.e. 
the syndrome) unreliable; the third ingredient is 
to use several independently prepared ancillas to 
extract the same syndrome, and take a majority 
vote. These methods are typically analysed un- 
der the assumption that different gates in the net- 
work, and qubits at different positions or times, 
fail independently with probability e. The degree 
to which this assumption can be relaxed without 
significantly affec ting the results is an area of ac- 
tive investigation |lfil ll8ll2lL l22j . 

Let the processes which cause imperfection be 
called 'failures' and the resulting imperfections in 
the state of the qubits be called 'errors'. Each error 
e is a tensor product of Pauli operators. Let -P e (e) 
be the probability that the ancilla's state differs 
from the desired state by e. We define the error to 
be uncorrelated if P e satisfies 

P e (e) = a e e s | s > w e for w e <t; s > t for w e > t, 

and we define e to be correlated otherwise. Here w e 
is the weight of e (the number of qubits it affects) . 
The coefficients a w (which depend on the code and 
the networks) should not be unreasonably large. 

The central resource in the QEC protocol is an an- 
cilla prepared in an approximation to |0) L having 
uncorrelated X errors. If this is available, then 
after coupling it to the data (in order to obtain 
the syndrome of the data) the probability of find- 
ing uncorrectable errors in the data scales in the 
right way, and the main result of FT QEC theory 
applies. 

Ancilla verification is achieved by measuring all 
those observables M in the stabilizer of |0) L which 
anticommutc with X errors (and therefore whose 
measured eigenvalues reveal the presence of X er- 
rors). The problem is that a failure of < w of these 
measurements might allow an X error of weight w 
to go undetected (see figure fa). This was avoided 
in Shor's and subsequent work by repeating the 
measurements t + 1 or more times. This solution is 



costly in noise tolerance or computer size or both 
because for a large computation t I. 

I will now show how to avoid the repetition in the 
case of an arbitrary CSS code. 

The ancilla is to be placed in the codeword state 
|0) L = J2 U l M € C) where C is the classical code on 
which the CSS code is based. When an approxi- 
mation to \0) L is prepared by any means, there are 
typically many locations in the preparation where 
a single failure results in a high-weight error in 
the output state; I assume the worst case that 
the preparation leaves an error of any non-zero 
weight with probability proportional to e. The sub- 
sequent measurements of observables M in the Z 
part of the stabilizer (equivalently, of parity checks 
which |0) L ought to satisfy) must satisfy two con- 
ditions: (1) no correlated X errors are introduced 
and (2) all correlated X errors are detected with 
high enough probability: the probability that an 
error of weight w goes undetected must scale as 
£ s>0-i) Condition (1) is guaranteed by the fact 
that X and Z errors propagate differently, so that 
a network of controlled-gates to store X parity in- 
formation into one verification bit will cause Z- but 
not X-error-propagation around the ancilla bits. I 
will prove that a (properly constructed) noisy net- 
work also satisfies (2), where the network requires 
only a single measurement of each check, and a sin- 
gle physical qubit to accumulate each logical check 
bit, therefore it is minimal and QEC is rapid. 

We require that failures of low weight in the ver- 
ification network only cause ancilla errors of low 
weight to be 'missed'. The non-trivial situation is 
when at least one failure occurs in the prepara- 
tion and at least one in the verification; the case 
t = I (single-error-correcting code) is trivial since 
this is already a second-order process; this is why 
the question has not arisen in discussions of the 
[[7, 1,3]] code and its concatenations. 

Consider the syndrome given by a complete set 
of all the checks in H, where each check is mea- 
sured by preparing a single verification qubit in 
|+) = (|0) + |I))/\/2, operating C Z gates from ver- 
ification bit to ancilla at locations given by a row 
of H, then measuring the verification bit in the 
|+) , |— ) basis. A sufficient condition for CSS codes 
to achieve the desired behaviour is that every syn- 
drome of weight w s < t can be produced by an 
error of weight w c < w s . If this holds then failure 
of w — w s gates in the verifier, allowing the error 
to pass unnoticed, will result in an ancilla error of 
weight at most w. This is true whether the error 
was produced in the preparation stage or the veri- 
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FIG. 1: An example of the verification construction. 
Both networks show a complete set of parity check 
measurements to detect bit-errors in the codeword 
00000) + 1 11111). (a) poorly constructed network; in 
several places a single failure would allow a two-bit er- 
ror to go undetected, therefore repetition is needed, (b) 
well-constructed network: for any input ancilla state, 
at the output the ancilla has uncorrelated X errors 
(and may have correlated Z errors) whenever the check 
measurements all give zero. 



fication stage or a combination of both. We do not 
need to constrain the behaviour for syndromes of 
weight w s > t because in any case a high-order fail- 
ure would be needed for the verifier to miss these. 
The sufficiency of the condition relies on the fol- 
lowing symmetry of the codeword. Since we are 
verifying a single state (not a space) , all errors are 
correctable. This implies that different errors hav- 
ing the same syndrome must act identically on the 
state, and indeed using standard stabilizer meth- 
ods it is easy to prove this|2^|. This symmetry is 
intimately related to the entanglement of the state. 
For a simple example observe that |000) + |111) is 
transformed in the same way by errors XII and 
IX X. This means that although a given syndrome 
s is produced by various errors, of which some have 
weight > w s , the effective error on the state in 
question is nevertheless of weight < w s , as long as 
the condition holds. 

We can satisfy the condition by exploiting basic 
properties of linear codes. The parity checks form a 
linear vector space, and measurement of any span- 
ning set is enough to measure the whole space. We 
can therefore make a considered choice of the span- 
ning set. The property we need is that no coset 
leader has higher weight than its syndrome. To 
prove that this can always be arranged, use the 
fact that the check matrix can always be written 
in the standard form H = (A, I) where / is the 
r x r identity matrix and A is the rest of H (r is 
the number of rows in H). We adopt this form; 
then the identity matrix part ensures that all the 
syndromes of weight w can be produced by errors 
of weight w, because any error affecting only the 
last r bits gives a syndrome equal to the error, and 
all 2 r syndromes appear in this argument, QED. 
Figure lb shows a simple example. 



We have now arranged that each parity check need 
only be measured once when an ancilla is verified. 
This shows that even a minimal QEC network, in 
the sense of one performing minimal filtering of 
ancillas, can be fault-tolerant. This reduction from 
t+1 repetitions to 1 permits both a large reduction 
in the size of the computer and also an increase in 
the tolerated memory noise, since with repeated 
verification 0(t + 1) more ancillas would have to 
be prepared in parallel in order to keep the overall 
recovery rate up, and each ancilla would also have 
to survive 0(t + 1) times longer before it can be 
used. A large computation requires t in the range 7 
(e.g. [[127,29,15]] BCH code) to 15 (e.g. [[7,1,3]] 
code concatenated twice). 

Repetition is still used to extract several copies 
of the syndrome, to guard against correcting the 
computer on the basis of a wrong syndrome. Next 
I reduce this also. Suppose the data has an error 
e whose true syndrome is s. If the syndrome were 
extracted bit by bit, as in then a single fail- 

ure can result in a single error g in the syndrome. 
If s + g is accepted the 'correction' of the data will 
leave the error e + / in the data, where / is the 
coset leader of the erroneous syndrome s+g. f is in 
general unrelated to e, therefore the final state of 
the computer is liable to contain an error of weight 
wt(e)+wt(/) with probability - e wt C e )+ 1 ; the QEC 
soon breaks down since wt(/) can be greater than 
1. However, in the method under discussion, the 
syndrome is extracted indirectly by allowing the 
error e to propagate to the ancilla and then mea- 
suring the ancilla. A failure which gives a single er- 
ror g in the ancilla merely changes the error in the 
ancilla to e + g. Assuming this is correctable, the 
interpretation of the ancilla measurement outcome 
identifies e + g as the error to be corrected in the 
data; the final situation is then to leave the data 
with error g with probability ~ £ wt(e)+i^ w i 1 j c } 1 j s 
merely a small addition to the probability of single 
errors in the data, so is harmless. There remains 
a small need for syndrome extraction repetition to 
guard against the comparatively few failure loca- 
tions that give larger weight Z errors in the ancilla. 

Next I will show how to compress the time required 
by the preparation and verification [H) networks. 
I already noted that, in order to be fault-tolerant, 
the H network is constructed for H in the standard 
form (A, I). This has the additional advantage of 
almost minimizing the number of l's in the matrix 
and hence the number of gates in the verification 
network. The network of C Z gates between ver- 
ification bits and ancilla bits can be parallelized 
to the degree that any group of Z gates involv- 
ing different pairs of bits can take place simultane- 
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ously. The problem of minimizing the number of 
time-steps is equivalent to the problem of forming 
a latin rectangle the size of A, that is r x (n — r), 
using an alphabet of minimal size, where the places 
where A has a zero need not be filled. Suppose we 
form such a rectangle using integers from 1 to N, 
then each integer gives the time-step in which the 
ancilla qubit of that column is coupled to the ver- 
ification bit for that row: the fact that no symbol 
appears twice on a column guarantees that no an- 
cilla bit is involved in more than one gate at once; 
the fact that no symbol appears twice on a row 
guarantees that no verifier bit is involved in more 
than one gate at once. An example is given in fig- 
ure 2. It is clear that N > iu max where w max is 
the largest weight of a row or column of A, and 
it can be shown from Hall's theorem in combina- 
torics that a latin rectangle exists for this smallest 
possible N [24^ . The verification network is com- 
pleted by a single C Z from the verification bits to 
the last r ancilla bits; these can be simultaneous, 
so the total number of time-steps for verification 
is N + 1 + T m where T m is the time required for 
measurement of a set of qubits. 
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FIG. 2: Construction of the G and i? networks, il- 
lustrated for the example of a [[21, 3, 5]] code. The 
A matrix is shown, with blanks where zeros appear, 
and the other locations numbered in a latin rectan- 
gle. The numbers indicate the time step in which each 
controlled-gate is applied. 

The method to prepare the |0) L state need not in- 
volve networks of gates, but if a network is used 
then the same analysis shows that the G network 
can be accomplished in N time-steps using 
gates (on bits prepared in |0) or |+)). 

To conclude, all CSS codes allow a network to pre- 
pare verified ancillas which is both fault-tolerant 
and minimal; such networks can also be com- 
pressed in time by a general procedure based on 
latin squares. The results described have the com- 
mon theme of using structure in the design of the 
QEC network to serve to enhance its ability to ex- 
tract entropy from the computer. In information 
theoretic terms, the structure is a form of nega- 
tive entropy in the ancillas, which allows them to 



absorb more entropy from the data. The prac- 
tical result is that fewer checking operations and 
timesteps are needed to run the QEC protocol, so 
that both a saving in computer size and an in- 
crease in memory noise tolerated is obtained. The 
saving is by a factor of the order of t, the number 
of errors correctable by the code, which is in the 
range approximately 7 to 15 for a large quantum 
computation. 

This work was supported by the EPSRC and the 
Research Training and Development and Human 
Potential Programs of the European Union. 



[1] C. H. Bennett and D. P. DiVincenzo, Nature 404, 
247 (2000). 

[2] A. Steane, Rep. Prog. Phys. 61, 117 (1998). 

[3] M. A. Nielsen and I. L. Chuang, Quantum Com- 
putation and Quantum Information (Cambridge 
University Press, Cambridge, 2000). 

[4] P. W. Shor, Phys. Rev. A 52, R2493 (1995). 

[5] A. M. Steane, Phys. Rev. Lett. 77, 793 (1996). 

[6] A. R. Calderbank and P. W. Shor, Phys. Rev. A 
54, 1098 (1996). 

[7] A. M. Steane, Proc. Roy. Soc. Lond. A 452, 2551 
(1996). 

[8] P. W. Shor, in Proc. 35th Annual Symposium on 

Fundamentals of Computer Science (IEEE Press, 

Los Alamitos, 1996), pp. 56-65. 
[9] J. Preskill, Proc. R. Soc. Lond. A 454, 385 (1998). 
[10] D. P. DiVincenzo and P. W. Shor, Phys. Rev. Lett. 

77, 3260 (1996). 
[11] A. M. Steane, Phys. Rev. Lett. 78, 2252 (1997). 
[12] D. Gottesman, Phys. Rev. A 57, 127 (1998). 
[13] A. M. Steane, Nature 399, 124 (1999). 
[14] D. Gottesman and I. L. Chuang, Nature 402, 390 

(1999). 

[15] J. Preskill, in Introduction to Quantum Com- 
putation, edited by H.-K. Lo, S. Popescu, and 
T. Spiller (World Scientific, Singapore, 1998), pp. 
213-269. 

[16] D. Aharonov and M. Ben-Or, in Proc. 29th Ann. 
ACM Symp. on Theory of Computing (ACM, New 
York, 1998), p. 176. 

[17] C. Zalka, quant-ph/9612028 (1997). 

[18] A. M. Steane, Phys. Rev. A 68, 042322 (2003). 

[19] D. Aharonov, Phys. Rev. A 62, 062311 (2000). 

[20] E. Dennis, A. Kitaev, A. Landahl, and J. Preskill, 
J. Math. Phys. 43, 4452 (2002). 

[21] R. Alicki, M. Horodecki, P. Horodecki, and 
R. Horodecki, Phys. Rev. A 65, 062101 (2002). 

[22] A. M. Steane, in Decoherence and its Implications 
in Quantum Computation and Information Trans- 
fer (IOS Press, Amsterdam, 2001), pp. 284-298, 
quant-ph/0304016. 

[23] This is an example of degeneracy in quantum cod- 
ing. 

[24] I am indebted to a referee for pointing this out. 



